How robust are the business requirements?
During the review process of COBIT, senior managers and CIOs liked the definition of the business requirements for information, and supported the choices about which requirements were most important in what process. Choices were difficult and entailed considerable debate among the experts during the project. The guiding principle has always been: What really is fundamental for this control objective in this process? Which resource needs special control? Which information requirement needs special attention? With the development of COBIT 4.1, the understanding of business requirements has been strengthened by the addition of generic business goals and a business-goal-to-IT-goal-to-IT-process cascade. These generic goals, based on extensive industry research, help COBIT users align their business requirements with specific critical processes.
